Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa
File:                     3133382e39372e39362e302f32322d3232203d3e20323634313337.roa (raw, json)
Hash identifier:          4C3HxJAYuhfPOXOmwAXiC0gkMi9W6/py2bMKQw4k0Jc=
Subject key identifier:   F8:08:A0:C5:0E:F1:DA:56:A2:FE:B4:B6:BD:A2:90:7A:56:02:C6:7C
Certificate issuer:       /CN=2EC69813A49E7B20507CB65A508F14FFB1282200
Certificate serial:       304C91CED624B7DE27DEEEA8325196F5A14B2346
Authority key identifier: 2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa
Signing time:             Mon 11 Dec 2023 14:05:18 +0000
ROA not before:           Mon 11 Dec 2023 14:00:18 +0000
ROA not after:            Mon 09 Dec 2024 14:05:18 +0000
asID:                     264137
IP address blocks:        138.97.96.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4c:91:ce:d6:24:b7:de:27:de:ee:a8:32:51:96:f5:a1:4b:23:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EC69813A49E7B20507CB65A508F14FFB1282200
        Validity
            Not Before: Dec 11 14:00:18 2023 GMT
            Not After : Dec  9 14:05:18 2024 GMT
        Subject: CN=F808A0C50EF1DA56A2FEB4B6BDA2907A5602C67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:95:af:34:13:ee:1a:c7:01:06:e1:67:ab:
                    a1:a6:c3:72:45:86:ea:a6:17:77:88:ce:4a:21:62:
                    54:e3:b0:11:e9:59:c4:75:21:fe:04:d2:45:65:21:
                    08:ca:08:23:2f:bc:b4:8e:1c:1d:85:15:63:7a:9d:
                    76:b0:f0:07:58:37:b1:b3:a8:54:80:dc:8a:63:3e:
                    59:c7:4d:ec:c9:a7:e6:dc:6c:ab:51:6e:3e:b0:e4:
                    2e:b6:e5:cc:10:28:38:b7:c7:31:d5:74:b2:af:f4:
                    9d:f0:da:46:04:36:9d:94:01:00:a2:5e:b9:c0:21:
                    ca:f4:41:86:21:4e:23:fa:89:3b:50:e0:1d:50:9a:
                    12:fc:5f:af:9c:25:04:fe:17:67:e4:65:86:a8:fa:
                    8c:50:ec:1f:9c:5c:e7:66:ea:d6:c5:38:09:b0:99:
                    f5:cb:f8:c5:c2:65:95:90:1a:e5:24:f8:45:a9:bb:
                    b1:4a:4e:8a:5a:a4:20:9c:79:7d:8e:e1:84:97:8c:
                    d7:cb:e6:0c:a0:72:03:ed:f6:da:d9:c7:00:7d:c9:
                    15:1f:dc:e5:b1:e3:d7:aa:ab:dc:4e:86:33:3b:17:
                    b2:1a:8c:37:1d:8c:1f:70:08:1f:c7:10:7d:63:9a:
                    e1:e9:dd:fa:99:aa:b9:cc:c7:9d:dd:bb:b6:0c:c1:
                    84:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:08:A0:C5:0E:F1:DA:56:A2:FE:B4:B6:BD:A2:90:7A:56:02:C6:7C
            X509v3 Authority Key Identifier:
                keyid:2E:C6:98:13:A4:9E:7B:20:50:7C:B6:5A:50:8F:14:FF:B1:28:22:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/2EC69813A49E7B20507CB65A508F14FFB1282200.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2EC69813A49E7B20507CB65A508F14FFB1282200.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNQuXAXW17xR841v9Bc5Qm5Fe6XFCpCxcnYesqaFmtYt/0/3133382e39372e39362e302f32322d3232203d3e20323634313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:ef:1e:54:5b:38:61:d7:53:82:eb:19:87:bb:27:6c:4b:9e:
         a8:5f:cc:9b:c5:34:a2:74:14:d9:15:44:1f:af:93:9a:66:c1:
         ec:89:61:c9:1a:82:8d:58:ab:41:05:ae:c8:2d:56:78:52:6a:
         08:06:60:c8:9c:cb:d1:1b:77:68:23:b8:33:be:94:60:1a:5a:
         de:65:eb:96:c5:b1:ee:60:5b:e0:0d:ab:f6:c8:f4:2c:7e:bf:
         ee:58:00:b7:12:94:fd:ce:7d:f7:13:d2:d8:07:bd:fb:5a:a0:
         0e:5b:4e:c8:a9:89:fd:59:af:84:6c:ed:52:7d:82:b2:91:cd:
         ab:9b:b4:a0:b0:49:cc:c0:1f:80:46:80:23:54:a5:53:73:e7:
         72:ae:69:b8:e4:fb:95:d5:a3:92:69:ae:7b:1d:ab:de:b8:56:
         00:4f:6a:0d:ed:66:23:31:45:b6:7d:3a:37:cd:75:1e:10:22:
         de:41:ab:fb:fb:22:72:a4:35:e8:a0:65:66:0a:80:37:99:16:
         99:09:d7:ff:1c:a1:80:07:a4:61:cc:ca:ef:f1:f6:13:a3:67:
         39:c9:99:f3:0a:b4:ac:5c:01:4f:66:95:f4:6c:f5:f2:f6:83:
         83:1c:9a:cd:60:c1:4b:29:fa:2e:cc:2b:f1:4f:53:59:83:e4:
         21:aa:fd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org